Privacy Policy

 

1. General information

This Privacy Policy describes the rules for processing personal data of users of the website https://www.dekaforensics.pl/ (hereinafter: the “Website”).

The controller of personal data is DEKA Forensics sp. z o.o., with its registered office in Warsaw, ALEJA WOJSKA POLSKIEGO 11, 01-524, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001216764, NIP: 5253074511 (hereinafter: the “Controller”).

Contact regarding personal data protection matters:
kontakt@dekaforensics.pl

The Controller has not appointed a Data Protection Officer (DPO).

 

2. Scope of processed data

The Website is for informational purposes. The Controller does not provide user accounts or a contact form on the Website.

In connection with the use of the Website, the Controller may process the following data:

2.1 Technical and operational data (collected automatically):

• IP address,

• device and browser information (e.g., type, version),

• data about activity on the Website (e.g., date and time of visit, visited subpages),

• data contained in server logs.

2.2 Data related to cookies and similar technologies:

• cookie identifiers and information stored in cookies.

2.3 Data provided voluntarily via direct contact (e.g., e-mail):

• first and last name (if provided),

• e-mail address,

• telephone number (if provided),

• other data included in the content of the message.

3. Purposes and legal bases for processing

Personal data may be processed for the following purposes:

A) Ensuring the operation and security of the Website

Scope of data: IP address, server logs, technical data, necessary cookies
Legal basis: Article 6(1)(f) GDPR (the Controller’s legitimate interest consisting in ensuring the proper functioning of the Website, its security, and preventing abuse).

B) Direct contact (e.g., e-mail correspondence)

Scope of data: data provided in the message (e.g., name, e-mail, telephone, content)
Legal basis:

• Article 6(1)(f) GDPR (the Controller’s legitimate interest—conducting correspondence and providing a response), or

• Article 6(1)(b) GDPR (if the contact concerns taking steps prior to entering into a contract at the request of the data subject).

C) Analytical/functional cookies (if enabled)

If the Website uses (or in the future begins to use) analytical or functional tools requiring consent, the data will be processed on the basis of the user’s consent.
Legal basis: Article 6(1)(a) GDPR (consent).

The Controller does not use users’ data for profiling or automated decision-making that would produce legal effects concerning the user or similarly significantly affect the user.

 

4. Data recipients

Personal data may be disclosed to entities supporting the Controller in maintaining the Website and IT infrastructure—only to the extent necessary to achieve the above purposes, in particular:

• the Website platform and hosting providers,

• IT services/system administration providers,

• e-mail service providers (if contact takes place by e-mail).

These entities process data on the basis of appropriate agreements and in accordance with applicable laws.

 

5. Transfers of data outside the EEA (EU)

Due to the use of IT providers’ solutions, data may also be processed outside the European Economic Area (EEA), in particular where the provider’s infrastructure or technical support is located outside the EEA.

In such cases, the Controller ensures that data transfers are carried out in accordance with the GDPR, in particular on the basis of:

• an adequacy decision, or

• Standard Contractual Clauses (SCCs) and additional security measures.

6. Data retention period

The Controller retains data:

• server logs and technical data—for the period necessary to ensure the security and proper operation of the Website (as a rule, no longer than 12 months, unless a longer period is necessary due to a security incident or for the establishment, exercise, or defense of claims),

• e-mail correspondence data—for the duration of the correspondence and then for the period necessary to secure or pursue potential claims,

• data processed on the basis of consent (e.g., analytical cookies)—until consent is withdrawn or cookie settings are changed.

7. Rights of data subjects

The user has the right to:

• access their data,

• rectify their data,

• erase their data,

• restrict processing,

• object to processing (where the legal basis is Article 6(1)(f) GDPR),

• data portability (to the extent provided by the GDPR),

• withdraw consent at any time (if processing is based on consent).

The user also has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

 

8. Is providing data mandatory?

Providing data is voluntary.

In the case of e-mail contact: providing contact details is necessary for the Controller to respond to the message.

In the case of non-essential cookies: giving consent is voluntary—lack of consent does not block access to the Website.

 

9. Cookies

The Website uses cookies to ensure its proper functioning and—only with the user’s consent—for functional or analytical purposes (if such cookies are used).

Cookies are small text files stored on the user’s device.

The user may at any time:

• change cookie settings via the browser settings, and/or

• manage consent in the cookie banner (if available on the Website), including withdrawing consent.

10. Changes to the Privacy Policy

The Controller may update this Privacy Policy, in particular in the event of technological or legal changes. The current version of the document is always available on the Website.

 

Date of last update: 21 January 2026